General

  • Target

    JaffaCakes118_e0fe91bbc81cb0cfeb459675418099254137a8f93e0fb1e6442b47ed096a69eb

  • Size

    184KB

  • Sample

    241230-f25hdsyrhp

  • MD5

    053cc5b8011c0a913a464405a4a966b2

  • SHA1

    d441748fcab8458dfbc84911d170e50e15bafdc0

  • SHA256

    e0fe91bbc81cb0cfeb459675418099254137a8f93e0fb1e6442b47ed096a69eb

  • SHA512

    3dd9673bc4e30b3971dde8e9eafacd55c1467325d3d60501ec4eab799412e84ba1802b9511aa4187bfe22ac80273d292925a2db1719c46b23389970c39964220

  • SSDEEP

    3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JDa//2uFrSc:0fYOX+wTScR/Xzku9LVwouG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e0fe91bbc81cb0cfeb459675418099254137a8f93e0fb1e6442b47ed096a69eb

    • Size

      184KB

    • MD5

      053cc5b8011c0a913a464405a4a966b2

    • SHA1

      d441748fcab8458dfbc84911d170e50e15bafdc0

    • SHA256

      e0fe91bbc81cb0cfeb459675418099254137a8f93e0fb1e6442b47ed096a69eb

    • SHA512

      3dd9673bc4e30b3971dde8e9eafacd55c1467325d3d60501ec4eab799412e84ba1802b9511aa4187bfe22ac80273d292925a2db1719c46b23389970c39964220

    • SSDEEP

      3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JDa//2uFrSc:0fYOX+wTScR/Xzku9LVwouG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks